Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/16d5ce-184a-4366-8d75-aaab25894d5e/1/NLDFpAPi2tPEe3kf2iBCz3FQCc8.mft
File: NLDFpAPi2tPEe3kf2iBCz3FQCc8.mft (raw, json)
Hash identifier: s5Avi9vBTRQBnX41mc/U/K5raFZWF1P5L1U83AIEj0Q=
Subject key identifier: 60:C5:3F:2B:81:C7:E2:04:C7:19:83:F8:57:0B:54:0C:69:BE:48:76
Authority key identifier: 34:B0:C5:A4:03:E2:DA:D3:C4:7B:79:1F:DA:20:42:CF:71:50:09:CF
Certificate issuer: /CN=34b0c5a403e2dad3c47b791fda2042cf715009cf
Certificate serial: 019A51877C20E3E7A3F0C71318CF2E433B98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NLDFpAPi2tPEe3kf2iBCz3FQCc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/16d5ce-184a-4366-8d75-aaab25894d5e/1/NLDFpAPi2tPEe3kf2iBCz3FQCc8.mft
Manifest number: 07D1
Signing time: Wed 05 Nov 2025 01:00:24 +0000
Manifest this update: Wed 05 Nov 2025 01:00:24 +0000
Manifest next update: Thu 06 Nov 2025 01:00:24 +0000
Files and hashes: 1: NLDFpAPi2tPEe3kf2iBCz3FQCc8.crl (hash: 0MrQIVwmM741dWqgS8JVS+mLFGpJpvpXnQ2nMnENOHE=)
2: rNTIvqbNKxxJtGWChfe4Dqw9tgw.roa (hash: CJ6pfwFz9zw3PaH1WC3tO5GAbQu9B8MKzIYwz13JpcI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/16d5ce-184a-4366-8d75-aaab25894d5e/1/NLDFpAPi2tPEe3kf2iBCz3FQCc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/16d5ce-184a-4366-8d75-aaab25894d5e/1/NLDFpAPi2tPEe3kf2iBCz3FQCc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NLDFpAPi2tPEe3kf2iBCz3FQCc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:87:7c:20:e3:e7:a3:f0:c7:13:18:cf:2e:43:3b:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34b0c5a403e2dad3c47b791fda2042cf715009cf
Validity
Not Before: Nov 5 01:00:24 2025 GMT
Not After : Nov 6 01:00:24 2025 GMT
Subject: CN=60c53f2b81c7e204c71983f8570b540c69be4876
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:eb:b7:21:0f:53:4e:9d:97:11:e0:14:d0:5e:
0e:b1:be:b3:f1:b6:84:7c:f7:44:fd:46:2b:0b:0e:
6b:85:f4:1b:92:58:6d:a3:c5:dc:05:90:1d:c9:51:
8a:6a:e3:33:00:ec:20:3f:27:cf:05:45:4a:56:83:
38:b3:0d:13:60:e1:06:f4:2f:55:c6:88:5c:c1:a2:
97:de:70:65:fe:fd:fb:54:1c:a2:7b:c8:93:72:48:
ed:13:9a:42:9c:60:2d:f7:ba:23:e8:0a:68:8b:3b:
58:93:58:13:3a:a9:c3:39:fe:d0:62:b4:76:2d:e7:
93:84:a2:46:26:64:a7:84:fe:d7:6e:f9:98:eb:d9:
5c:c6:d1:6a:51:eb:02:4e:d6:fc:e8:18:e7:8b:48:
93:86:cd:f0:7a:09:be:77:92:6e:f5:31:04:39:19:
fd:7c:90:b7:fb:fb:ea:63:22:39:48:98:45:cb:ad:
1c:6c:9d:f4:30:08:ed:9d:66:27:94:c2:78:3e:8d:
f6:fd:73:9e:97:64:8b:fe:5d:8d:97:23:0d:1e:23:
cc:7f:3c:29:67:6b:cc:d8:8b:10:8a:c4:ee:64:52:
b9:ae:8c:dd:ac:e1:64:93:1d:bb:a2:17:c3:51:5d:
dd:47:ca:dc:19:03:e3:2b:e6:86:ff:9f:28:c6:c7:
6d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:C5:3F:2B:81:C7:E2:04:C7:19:83:F8:57:0B:54:0C:69:BE:48:76
X509v3 Authority Key Identifier:
keyid:34:B0:C5:A4:03:E2:DA:D3:C4:7B:79:1F:DA:20:42:CF:71:50:09:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NLDFpAPi2tPEe3kf2iBCz3FQCc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/16d5ce-184a-4366-8d75-aaab25894d5e/1/NLDFpAPi2tPEe3kf2iBCz3FQCc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/16d5ce-184a-4366-8d75-aaab25894d5e/1/NLDFpAPi2tPEe3kf2iBCz3FQCc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:7b:8e:cb:40:3e:25:6d:c2:03:f3:ab:6f:1f:80:05:92:46:
7e:69:89:13:3b:11:eb:24:f8:e5:43:07:bf:7c:e7:dd:f7:a6:
19:1d:8c:de:c6:e2:4f:d0:8d:a0:f6:33:8c:a0:c8:f0:e9:6c:
22:50:83:7c:b1:9b:05:1c:53:38:8f:0e:3f:8d:d1:86:7b:74:
3e:27:a2:aa:c6:83:41:31:76:32:e4:b2:66:a9:56:6a:ea:20:
99:8f:19:ed:8b:bd:77:21:59:01:eb:cf:78:13:f1:75:04:5e:
5e:d8:0f:2b:3d:8e:e3:75:31:0d:ad:26:b4:94:a8:e5:50:34:
a9:65:a3:87:85:02:99:34:45:82:dc:ab:6e:dd:a0:09:a4:a1:
81:02:61:b1:f5:fa:f2:7c:66:bb:64:66:72:1b:e1:e0:0f:f1:
4d:d2:4d:a2:58:17:89:96:8b:72:05:6b:f3:b1:ae:1a:54:65:
04:49:e4:a5:3d:64:a6:12:33:01:51:c1:f2:29:a8:27:38:66:
84:cb:d5:d8:8f:16:e3:01:02:41:06:7b:69:97:3b:54:ca:84:
f4:58:00:03:3c:6e:57:82:75:e9:c3:89:b1:c2:4a:57:e6:76:
ab:f4:68:6b:ce:fe:24:bd:81:ed:65:76:3e:2d:2b:15:a2:03:
60:fa:6e:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:49:38 2025 by rpki-client